Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.107exploits catalogados

34.679CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

13.812 exploits

GitHub PoC★ 1

Unrestricted File Upload by Weak Encryption affected versions (CVE-2017-11317) 2. Remote Code Execution by Insecure Deserialization - (CVE-2019-18935)

CVE-2017-11317CRITICALsob ataque13 out 2022

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload

100RISCO

GitHub PoC★ 87

PoC for CVE-2022-40684 - Authentication bypass lead to Full device takeover (Read-only)

CVE-2022-40684CRITICALsob ataqueransomware13 out 2022

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RISCO

GitHub PoC★ 16

Bash PoC for Fortinet Auth Bypass - CVE-2022-40684

CVE-2022-40684CRITICALsob ataqueransomware13 out 2022

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RISCO

GitHub PoC

r00t4dm/Jenkins-CVE-2016-9299

CVE-2016-9299—12 out 2022

The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a

60RISCO

GitHub PoC★ 3

r00t4dm/Jenkins-CVE-2017-1000353

CVE-2017-1000353CRITICALsob ataque12 out 2022

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code exe

100RISCO

GitHub PoC★ 2

0x1nsomnia/CVE-2022-36067-vm2-POC-webapp

CVE-2022-36067CRITICAL12 out 2022

vm2 vulnerable to Sandbox Escape before v3.9.11

60RISCO

GitHub PoC

edsonjt81/CVE-2022-0847-DirtyPipe-

CVE-2022-0847HIGHsob ataque12 out 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISCO

GitHub PoC★ 9

RCE Exploit and Research

CVE-2022-40471CRITICAL12 out 2022

Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via p

68RISCO

GitHub PoC

Remote shell on CVE-2009-4623

CVE-2009-4623—12 out 2022

Multiple PHP remote file inclusion vulnerabilities in Advanced Comment System 1.0 allow remote attackers to execute arbi

23RISCO

GitHub PoC★ 1

MariliaMeira/CVE-2019-14287

CVE-2019-14287—12 out 2022

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and se

35RISCO

GitHub PoC★ 1

6E6L6F/CVE-2022-35914

CVE-2022-35914CRITICALsob ataque12 out 2022

/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.

100RISCO

GitHub PoC

r00t4dm/Jenkins-CVE-2015-8103

CVE-2015-8103—12 out 2022

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary co

60RISCO

GitHub PoC★ 1

TP-Link Tapo c200 ver <1.1.15 - Remote Code Execution (RCE)

CVE-2021-4045CRITICAL11 out 2022

TP-LINK Tapo C200 remote code execution vulnerability

70RISCO

GitHub PoC★ 6

CVE-2021-3129-Laravel Debug mode

CVE-2021-3129CRITICALsob ataqueransomware11 out 2022

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RISCO

GitHub PoC★ 1

Compled version of CVE-2022-0847 aka Dirty Pipe. Just one shot to root them all :D

CVE-2022-0847HIGHsob ataque11 out 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISCO

GitHub PoC★ 2

polkit priv esc: pkexec out of boundary exploit

CVE-2021-4034HIGHsob ataque10 out 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

GitHub PoC

testtesttesttesttesttesttesttesttesttest

CVE-2022-31479CRITICAL10 out 2022

Remote Code Execution via command injection of the hostname

48RISCO

GitHub PoC★ 8

cve-2022-41352 poc

CVE-2022-41352CRITICALsob ataque10 out 2022

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through ama

100RISCO

GitHub PoC★ 5

Script to check for IOC's created by ProxyNotShell (CVE-2022-41040 & CVE-2022-41082)

CVE-2022-41040HIGHsob ataqueransomware09 out 2022

Microsoft Exchange Server Elevation of Privilege Vulnerability

100RISCO

GitHub PoC★ 3

Detecting CVE-2022-26134 using Nuclei

CVE-2022-26134CRITICALsob ataqueransomware09 out 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

GitHub PoC★ 91

CVE-2022-41040 - Server Side Request Forgery (SSRF) in Microsoft Exchange Server

CVE-2022-41040HIGHsob ataqueransomware09 out 2022

Microsoft Exchange Server Elevation of Privilege Vulnerability

100RISCO

GitHub PoC★ 2

Lzer0Kx01/CVE-2022-35914

CVE-2022-35914CRITICALsob ataque09 out 2022

/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.

100RISCO

GitHub PoC★ 7

CVE-2022-39197 bug fix patch

CVE-2022-39197MEDIUMsob ataque09 out 2022

An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote att

75RISCO

GitHub PoC★ 224

Authenticated Remote Command Execution in Gitlab via GitHub import

CVE-2022-2992CRITICAL08 out 2022

A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows

85RISCO

GitHub PoC★ 10

7BitsTeam/exch_CVE-2021-42321

CVE-2021-42321HIGHsob ataqueransomware08 out 2022

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 3

Grafana - Directory Traversal and Arbitrary File Read

CVE-2021-43798HIGHsob ataque08 out 2022

Grafana path traversal

100RISCO

GitHub PoC★ 5

Open Web Analytics (OWA) - Unauthenticated Remote Code Execution

CVE-2022-24637—08 out 2022

Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, wh

60RISCO

GitHub PoC

This is a exploit for CVE-2019-9053

CVE-2019-9053—08 out 2022

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve

35RISCO

GitHub PoC★ 14

POC Of CVE-2022-26937

CVE-2022-26937CRITICAL07 out 2022

Windows Network File System Remote Code Execution Vulnerability

70RISCO

GitHub PoC★ 11

POC Of CVE-2022-21971

CVE-2022-21971HIGHsob ataque07 out 2022

Windows Runtime Remote Code Execution Vulnerability

83RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.